NTP server time sync issue - how to write alerts (Query DSL )

[jt2023]

NTP server time sync issue

[Christian_Dahlqvist]

If you are looking for help in this forum it help to describe the issue and setup you have in detail. The more effort you put into explaining your use case and issue, the better the chance to receive a good and relevant answer.

Whenever I personally see a short post like your wiothout any context I tend to avoid it as it usually end up in a protracted back and forth to extract the relevant information and define the exact issue, which requires a lot of effort.

[jt2023]

I would like to know how to check time sync issue in NTP SERVER via monitoring in ELK

[stephenb (Stephen Brown)]

Closing as duplicate of:

[Urgent] which 2 fields in Elastic Search can be made as time unsync comparsion?

{ "query": { "query_string": { "query": "("NTP server status changes to unreachable" OR "Global time setting changed by NTP") AND devname:(ABC)", "default_field": "logdesc" } } }